Skip to content

HDDS-4424. Update README with information how to report security issues #1548

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
elek merged 2 commits into from
Dec 1, 2020
Merged

HDDS-4424. Update README with information how to report security issues #1548

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
de4cffc
HDDS-4424. Update README with information how to report security issues
elek Nov 3, 2020
4b65612
Merge remote-tracking branch 'origin/master' into HDDS-4424
elek Nov 26, 2020
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -27,6 +27,7 @@ Ozone is a top level project under the [Apache Software Foundation](https://apac
* Chat: You can find the #ozone channel on the official ASF slack. Invite link is [here](http://s.apache.org/slack-invite).
* There are Open [Weekly calls](https://cwiki.apache.org/confluence/display/HADOOP/Ozone+Community+Calls) where you can ask anything about Ozone.
* Past meeting notes are also available from the wiki.
* Reporting security issues: Please consult with [SECURITY.md](./SECURITY.md) about reporting security vulerabilities and issues.

## Download

Expand Down
23 changes: 23 additions & 0 deletions SECURITY.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,23 @@
# Security Policy

## Supported Versions

The first stable release of Apache Ozone is 1.0, the previous alpha and beta releases are not supported by the community.

| Version | Supported |
| ------------- | ------------------ |
| 0.3.0 (alpha) | :x: |
| 0.4.0 (alpha) | :x: |
| 0.4.1 (alpha) | :x: |
| 0.5.0 (beta) | :x: |
| 1.0 | :white_check_mark: |

## Reporting a Vulnerability

To report any found security issues or vulnerabilities, please send a mail to security@ozone.apache.org, so that they may be investigated and fixed before the vulnerabilities is published.

This email address is a private mailing list for discussion of potential security vulnerabilities issues.

This mailing list is **NOT** for end-user questions and discussion on security. Please use the dev@ozone.apache.org list for such issues.

In order to post to the list, it is **NOT** necessary to first subscribe to it.